|
Search Results - Click to Enlarge
|
Following a Search tool search, the upper portion of the right pane lists all matching events found during the search; the lower portion shows details for a selected event. The Search Results allows you to navigate through the matching events and link to more information about the event. To understand how the Dashboard finds and displays the Search Results, see About Search Results.
To view all search results:
Scroll to view the entire page. The Search Results shows up to 100 search matches per page. If there are more than 100 matches, the Next Page button becomes active.
Click Next Page below the Search Results to find and display the next 100 matches. This button is available only when there are more than 100 matches to your search term.
Click Previous Page below the Search Results to display the previous page of matches. This button is available when you have paged forward in the Search Results.
The Search Results include a row for each match found. There may be more than one match in a single event record; for example, gun may be found in a window caption and in a domain name. Each match has the following columns (fields):
Event Date/Time: The Date and time the event was recorded.
Computer: Name of the computer where the event was recorded.
User: User logged in when the event was recorded.
Activity Type: The recorded activity, such as Web, Chat/IM, Online Search, and so on.
Found In: The field where the match was found, such as Window Caption, Chat Contents, or URL. The Search Results lists all matches found in fields, as explained in About Search Results. For more information about which fields are recorded for each activity type, see the links in Understanding Recorded Events.
|
|
When Search Results are extensive, the Dashboard caches pages of data to load and display. Each page of the Search Results contains 100 search term matches. When you select a new page of Search Results, the cache reloads and takes another few moments to display. See About Search Results. |
To re-order a page of Search Results:
Click a column header. For example, click User to sort the page A-Z by the User field. If you click the same column header again, the sort order is reversed. By default, results are listed in order of Date/Time, and only 100 matches are shown on a page. Clicking Event Date/Time sorts only the matches listed on the page from oldest to newest events.
|
|
Column headers sort the data on the current page only. Page through all data to see the full Search Results. Change your date/time criteria or the Search Fields, if necessary, to see the desired results. |
To view event details:
Click on a match (Search Result row) in the upper pane list to view details in the lower Search Detail pane. See Viewing Search Details.
Use the toolbar at the top of the Search Results to redo or modify the search.
Search for: Your current search query is displayed, and you can enter and execute a new search at any time. Remember to change the Global Criteria in the left pane, if you want to search a different date range.
Include partial matches: Expand the results. Select this option and click Search to expand the Search Results. For example, for the search term gun a partial match might add "gunshot," "gunshopfinder," and similar matches.
Search button: Executes a new search.
Options button: Brings you back to the Search Options pane, where you can select or deselect activities and activity fields to search. See Using Search. A Back button on the Search Options pane lets you return to these results.
For further investigation, you can instantly link to Screen Snapshots, Data Explorer, or User Explorer.
To get another view of the data:
Right-click on a row (record) in the Search Results pane.
Select a destination:
Go to Screen Snapshots - Opens Screen Snapshots for the event, allowing you to view photographs of user activity during the time period when the event took place. Because Screen Snapshots are taken at intervals, there may not be a snapshot of the exact Search Result event taking place.
Go to Data Explorer - Opens an Events window showing the event among other user events for the selected time period. You can explore the complete recording details in the event where the search match was found. You can find out what was happening with other users at that same time.
Go to User Explorer - Opens an Events window to the activity type, showing the event among the user's other activity for that time period. Find out what the user was doing that day, what type of email or chat the user was engaged in, and so on.
|
|
Column headers sort the data on the current page only. Page through all data to see the full Search Results. Change your date/time criteria or the Search Fields, if necessary, to see the desired results. |
Using the Search Results List 
